Organizations domiciled in Colombia can now adopt the international standard ISO/IEC 42001:2023, which will make them among the first organizations in Latin America to have a certifiable standard for the responsible management of artificial intelligence (AI) systems.
Colombia has adopted ISO/IEC 42001:2023, becoming the first country in Latin America to implement a certifiable international standard for AI systems. This standard promotes responsible AI governance, transparency, and risk management. It aligns with Colombia’s national AI strategy and offers competitive advantages for organizations, including global recognition and regulatory compliance. The standard covers AI-specific risk assessment, operational controls, and integration with other ISO standards.
Colombia’s Law 2502 of 2025 adds an aggravating factor to identity theft committed using AI, increasing penalties and formally recognizing deepfakes. It mandates traceability systems and coordinated public policy to address AI-related crimes. The law also strengthens biometric data protections, requiring explicit consent and strict processing safeguards. Implementation begins July 2026, reflecting Colombia’s commitment to digital ethics and cybersecurity.
The second reduction of the weekly working schedule set forth in Law 2101 of 2021 will come into effect on 15 July 2024. The new maximum working weekly schedule will be 46 hours.
The Colombian Tax Office (DIAN) issued the Tax Ruling No. 305[008717] of 30 April 2024, interpreting several matters regarding the application of the Significant Economic Presence rules. The following are the most relevant points addressed by the Ruling:
• Cases in which the deduction for payments abroad related to SEP transactions are not capped under article 122 of the Tax Code.
• Identification of SEP taxpayers that have opted for the filing/no WHT mechanism and those who are not subject to the regime.
• Scope of the activities that can be considered taxed under SEP rules.
• Comments on the priority order rules of withholding agents.
The Superintendence of Companies, through its External Circular No. 100-000003 of 23 April 2024 (hereinafter the “Circular”), extended the deadlines for the Chambers of Commerce and Foreign Non-Profit Entities (in its acronym in Spanish “ESALs”) to implement the Integral Self-Control and Risk Management System of money laundering, terrorism financing and financing of the proliferation of weapons of mass destruction and Business Transparency and Ethics Programs. The new deadline is on 31 May 2025.
In a recent decision, the Superintendence of Companies determined that an Excel-based risk matrix of the Self-Control and Integral Management System of Money Laundering, Terrorism Financing and Financing of the Proliferation of matrixes and of the Business Transparency and Ethics Program was insufficient because it did not allow to individualize, measure, assess and mitigate the risks identified.
The Colombian Tax Office (“DIAN”) and the Superintendence of Companies have entered into an inter-administrative agreement for the exchange of information related to the Ultimate Beneficial Owner Registry, to strengthen the inspection and control functions of these entities and their investigative powers.
The Superintendence of Industry and Commerce through Resolution No. 17526 of 2024 established the new fees for merger control procedures applicable during 2024. The parties must pay the applicable fee depending on the type of procedure: fast track notification, pre-assessment request phase I or pre-assessment request phase II. These new fees will be effective as of the date of publication of the resolution and the amount must be paid prior to the filing of the application before the SIC.
On 21 March 2024, the National Government issued the Decree 390 of 2024, by which it established the procedure for granting the Leniency Program in transnational bribery and corruption (“Leniency Program”) matters. Under the Leniency Program, it is possible to obtain full or partial immunity from possible sanctions for corruption and transnational bribery. In order to obtain the benefits of the Leniency Program, the company must provide relevant information on the aspects of the commission of such acts and the benefits obtained.